Privacy Policy

1. Who We Are

AML Commercial is a trading name of AML Financial Services Limited, a licensed Financial Advice Provider (FSP 714337) operating in New Zealand. We provide commercial property finance, asset and equipment finance, and mortgage advisory services.

For the purposes of the Privacy Act 2020, AML Financial Services Limited is the agency responsible for the personal information collected through this website, our application forms, and any direct communications with our team.

2. Information We Collect

We collect personal information that is necessary to assess your finance requirements and provide our advisory services. This may include:

• Identity Information — Full name, date of birth, residential address, business name, and business structure.
• Contact Information — Email address, phone number, and preferred contact method.
• Financial Information — Income details, existing mortgage balances, asset values, requested funding amounts, tax returns, bank statements, and credit history.
• Property & Asset Information — Property addresses, valuations, property types, equipment descriptions, and supplier details.
• Business Information — NZBN, business structure, company directorships, and trading history.
• Website Usage Data — IP address, browser type, pages visited, and cookies (see Section 8).

3. How We Collect Information

We collect personal information through the following channels:

• Online application forms and enquiry submissions on our website.
• Direct communication via email, phone, or in-person meetings.
• Documents you provide to support your finance application (e.g., bank statements, tax returns, identification).
• Third-party sources such as credit reporting agencies, property valuation services, and other financial institutions — with your consent or as permitted by law.

4. How We Use Your Information

Your personal information is used for the following purposes:

• Assessing your finance requirements and matching you with appropriate lending solutions from our panel of lenders.
• Submitting applications to lenders on your behalf as your mortgage adviser.
• Communicating with you regarding your enquiry, application status, and ongoing finance arrangements.
• Meeting our legal and regulatory obligations as a licensed Financial Advice Provider.
• Improving our website, services, and customer experience.
• Preventing fraud and managing risk.

We will not use your information for purposes unrelated to your finance enquiry without obtaining your prior consent.

5. Who We Share Your Information With

In the course of providing our services, we may share your personal information with:

• Lenders & Finance Providers — Non-bank lenders, banks, and asset finance providers on our panel, to assess and process your application.
• Credit Reporting Agencies — To verify your identity and obtain credit information as required.
• Valuers & Property Professionals — To obtain property or asset valuations relevant to your application.
• Legal & Compliance Advisers — Solicitors and compliance professionals involved in settlement processes.
• Regulatory Bodies — Government agencies and regulators where required by New Zealand law.

We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

6. How We Store & Protect Your Information

We take reasonable steps to protect your personal information from unauthorised access, modification, disclosure, or loss. Our security measures include:

• Secure storage of digital records with access restricted to authorised personnel only.
• Encryption of data transmitted through our website (SSL/TLS).
• Secure disposal of physical documents containing personal information when no longer required.
• Regular review of our security practices to maintain appropriate protection standards.

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Financial records are retained for a minimum of seven years in accordance with New Zealand regulatory requirements.

7. Your Rights

Under the Privacy Act 2020, you have the right to:

• Access — Request a copy of the personal information we hold about you.
• Correction — Ask us to correct any information that is inaccurate, incomplete, or misleading.
• Withdrawal — Withdraw your consent for us to process your information at any time (noting this may affect our ability to provide services).
• Complaint — Lodge a complaint with us or with the Office of the Privacy Commissioner if you believe your privacy has been breached.

To exercise any of these rights, contact our Privacy Officer using the details provided in Section 1. We will respond to your request within 20 working days.

8. Cookies & Website Analytics

Our website uses cookies and similar tracking technologies to improve your browsing experience and analyse website traffic. These may include:

• Essential Cookies — Required for the website to function correctly (e.g., form submissions, navigation).
• Analytics Cookies — Help us understand how visitors use our website so we can improve its content and functionality (e.g., Google Analytics).
• Marketing Cookies — Used to deliver relevant advertisements and track the effectiveness of our campaigns (e.g., Facebook Pixel).

You can manage your cookie preferences through your browser settings. Disabling certain cookies may limit the functionality of our website.

9. Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any updates will be published on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

11. Complaints

If you have any concerns about how we have handled your personal information, please contact our Privacy Officer in the first instance. We will investigate your complaint and respond as soon as practicable.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner: